this post was submitted on 23 Feb 2025
25 points (100.0% liked)

Privacy

34127 readers
594 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

My signal app a week ago had 2 seperate, a few days apart, app updates from the app itself. Asking to check install from unknown sources to be checked inside the settings. Giving prompts from the notification drop down. Such as app update available. Click it, asked for setting to be checked, I checked it, it said it updated, all seems well and fine.

But doing this outside of both stores which usually update the app from say F droid or Aurora. I've never seen this happen ever. It wasn't a user confirmation. It was a total app update.

Seems odd that the signal app itself asked to update itself from a notification from the drop down menu. How can I make sure it has not been compromised? Anyone else experienced something of the sort?

Android phone. Pixel. Gos.

you are viewing a single comment's thread
view the rest of the comments
[–] JoeKrogan@lemmy.world 6 points 12 hours ago* (last edited 12 hours ago)

If you trust the initial install then unless there is a warning about the signing key you are good. Only signal devs can sign the builds so if you installed the play store version then updated with their standalone apk or fdroid version then it should just work as the signing key is the same.

Guardian project are just publishing signals apk files as the signature matches.